Scala News -
A curated list of Scala related news from the community.
Articles
Dependent Types Primer in Scala
A primer on dependent types in Scala, explaining the problems they solve and covering path-dependent types, dependent method types, and dependent function types.
Fixing a remote execution vulnerability in sbt
Details a remote code execution vulnerability (GHSA-m2pw-22cj-jq4v) in sbt when serverConnectionType is set to TCP, unpatched auth on LSP endpoints, fixed in sbt 1.12.15/2.0.6.
GitHub Secure Open Source Fund
Typelevel graduated GitHub's Secure Open Source Fund, receiving a $10k grant and training that led to 2FA enforcement, private vulnerability reporting, and sbt-typelevel security enhancements.
sbt plugin classpath isolation
Explores sbt plugin classpath isolation, addressing Scala version conflicts between sbt and tools like Scalafix or Coursier, with a link to a full recipe for isolating plugin classpaths.
tree-sitter-scala 0.26.2
Announcement of tree-sitter-scala 0.26.2, a Scala parser written in C via Tree-sitter CLI, fast/incremental/error-tolerant, with Rust bindings published on crates.io.